OpenText vulnerabilities (CVEs)

227 CVEs matched to OpenText by name in NVD, none on CISA's Known Exploited list.

Back to the OpenText profile · Alternatives to OpenText · CVE RSS feed

Exploitation riskProbably exploited

227 of 227 CVEs assessed

confirmed exploited

EPSS ≥ 10%

>99%

highest single CVE

25 CVEs have an estimated 10%-or-higher chance of having already been exploited despite not appearing on CISA's KEV catalog. KEV is a curated record of confirmed cases rather than a complete census, so this is where its coverage is likely thinnest — an estimate from EPSS history, not a finding. Based on a median of 1 EPSS observations per CVE.

Likely-exploited estimates here rest on a median of 1 EPSS observation per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.

CVE-2017-5586 ↗EPSS 25%LEV ≥>99%Probably exploited
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to t…
CVE-2004-2496 ↗EPSS 9.2%LEV ≥>99%Probably exploited
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST r…
CVE-2011-1741 ↗EPSS 8.2%LEV ≥>99%Probably exploited
Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.…

Recent changes

last 90 days

CVE-2024-4184 is now estimated at a 11% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-10-20 · NVD ↗
CVE-2024-10863 is now estimated at a 10% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-10-20 · NVD ↗
CVE-2024-1148 is now estimated at a 20% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-10-20 · NVD ↗
CVE-2024-7050 is now estimated at a 14% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-10-20 · NVD ↗
CVE-2022-26327 is now estimated at a 15% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-10-20 · NVD ↗

CVE severity over time

CVEs by year and severity

Count of matched CVEs by the year NVD published them.
Year	Critical	High	Medium	Low	Unscored	Total
2026	1	3	9	0	10	23
2025	1	2	3	0	24	30
2024	5	36	31	3	11	86
2023	2	11	1	0	0	14
2021	0	33	2	3	0	38
2019	0	1	2	0	0	3
2018	0	1	2	0	0	3
2017	2	10	7	0	0	19
2015	0	0	1	0	0	1
2014	0	0	4	0	0	4
2013	0	0	1	0	0	1
2012	0	0	2	0	0	2
2011	0	1	0	0	0	1
2005	0	1	0	0	0	1
2004	0	1	0	0	0	1

Highest EPSS scores

EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.

CVE	EPSS	Percentile
CVE-2017-5586	25%	98%
CVE-2022-45926	17%	97%
CVE-2022-45925	17%	97%
CVE-2017-15276	9.5%	95%
CVE-2004-2496	9.2%	95%
CVE-2011-1741	8.2%	95%
CVE-2017-15012	7.8%	95%
CVE-2017-15013	6.6%	94%
CVE-2017-15014	4.9%	92%
CVE-2017-7221	4.3%	91%

Known CVEs (227)3 new

RSS ⇢

CVE-2026-75120 ↗new2026
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security cont…
CVE-2025-15591 ↗new2026
Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.
↗

How this is counted

CVEs come from the US National Vulnerability Database (NVD) and are matched to OpenText by vendor name. A name match can include CVEs that concern a similarly named product, and can miss ones filed under another name. The count reflects how widely a vendor's software is deployed and examined as much as anything else, so it is not a measure of how secure the vendor is and should not be used to rank vendors. Latest CVE added here: 2026-10-20.
Known-exploited status comes from the CISA Known Exploited Vulnerabilities (KEV) catalog. Last checked: 2026-10-20.
Exploit probability (EPSS) comes from FIRST. Latest score date: 2026-10-20.